Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsgljZHbhPTcqm9UlyMxijHnq1w.roa
File: bsgljZHbhPTcqm9UlyMxijHnq1w.roa (raw, json)
Hash identifier: kZSI9xSwyAeJvbYMvCcwOsBttjk9zhZLClkJBBiq+EY=
Subject key identifier: 6E:C8:25:8D:91:DB:84:F4:DC:AA:6F:54:97:23:31:8A:31:E7:AB:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C2A145B373F8F277858F77DEC0E4BEA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsgljZHbhPTcqm9UlyMxijHnq1w.roa
Signing time: Thu 27 Apr 2023 12:12:41 +0000
ROA not before: Thu 27 Apr 2023 12:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:a1:45:b3:73:f8:f2:77:85:8f:77:de:c0:e4:be:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 12:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ec8258d91db84f4dcaa6f549723318a31e7ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:ab:3a:73:af:62:f8:ad:6b:4f:a7:5f:79:
18:10:32:82:47:59:81:30:06:d5:ec:76:d6:82:7a:
40:4b:bc:62:f0:85:b5:c0:d4:a9:31:19:32:f3:a6:
6d:cd:69:e6:92:20:59:ac:15:ee:b3:95:d0:8f:1b:
4e:12:e1:2f:ff:43:c7:6f:f9:e5:a1:49:b2:a0:f9:
63:2a:05:3f:28:6b:06:61:7a:f5:a5:d6:21:2d:3f:
df:7d:8a:4f:5c:49:02:8d:c0:9b:8f:5e:3a:ae:0e:
94:93:23:60:f9:a2:9a:f1:b9:da:03:04:b3:d2:bd:
f4:e9:c7:fb:8f:88:92:b3:ce:66:2f:79:f3:ee:24:
9b:7b:7b:9f:2e:16:db:cc:bd:8c:e0:40:34:ff:cf:
6b:5a:7c:aa:9a:21:19:14:75:07:d9:91:e2:d0:3e:
d2:68:29:05:6e:34:05:a4:56:d5:6c:3a:51:9f:61:
5e:f7:77:31:85:eb:c7:16:6d:5c:00:73:d5:6a:42:
b3:4c:c0:a1:2f:b1:3e:f4:9a:d5:e3:bc:ef:32:6a:
8c:c7:d4:34:7a:c0:a3:28:c4:27:db:56:8a:c5:b8:
f4:8b:02:00:00:30:b6:bc:c0:a2:23:4b:c5:a9:5d:
3a:6c:93:61:8f:44:4b:73:7c:75:b2:50:8e:e0:c5:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:25:8D:91:DB:84:F4:DC:AA:6F:54:97:23:31:8A:31:E7:AB:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsgljZHbhPTcqm9UlyMxijHnq1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:86:2c:41:c0:b3:0b:c3:32:6f:4b:6b:d2:81:ad:d3:7f:d4:
d0:08:36:61:79:19:ec:7f:f1:5e:e2:e9:2e:bb:31:01:43:78:
57:ec:a9:42:75:e8:6b:56:79:4e:80:40:19:e5:a5:ad:fd:03:
e3:68:19:dd:27:82:38:70:71:29:69:f7:62:c7:56:f2:3f:87:
71:b6:56:3d:2e:c2:46:31:06:83:a7:9e:cd:1e:c3:90:d6:cc:
b5:8c:9d:ec:d6:65:76:59:9d:71:b3:9d:40:ee:f7:9e:95:4f:
cf:13:01:80:d5:ac:e5:20:c0:74:be:ed:22:3d:65:84:42:ac:
91:37:ba:0d:1b:fd:78:7a:2c:de:26:ab:fd:ac:a7:5a:b6:e8:
24:19:3d:44:59:0a:15:cd:62:5f:ae:75:8f:63:c0:6f:ef:3c:
57:50:b8:5e:4b:5b:ab:8e:13:bf:c7:fb:a0:85:d0:ac:3a:38:
ae:74:0e:66:5c:cd:56:27:45:fc:60:d6:06:8b:4e:c8:36:a3:
27:a8:64:42:a6:26:27:e3:e5:02:ca:2e:3c:ca:d7:54:35:6c:
d6:db:14:d5:ca:3e:67:97:0a:63:e4:46:f9:47:2a:15:a6:db:
51:0b:b2:27:f0:e2:ac:7a:1f:e6:26:3c:5b:b7:bc:21:e8:ff:
64:16:02:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfCoUWzc/jyd4WPd97A5L6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI3MTIxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWM4MjU4ZDkxZGI4NGY0ZGNhYTZmNTQ5NzIzMzE4YTMxZTdhYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb+rOnOvYvita0+nX3kYEDKCR1mB
MAbV7HbWgnpAS7xi8IW1wNSpMRky86ZtzWnmkiBZrBXus5XQjxtOEuEv/0PHb/nl
oUmyoPljKgU/KGsGYXr1pdYhLT/ffYpPXEkCjcCbj146rg6UkyNg+aKa8bnaAwSz
0r306cf7j4iSs85mL3nz7iSbe3ufLhbbzL2M4EA0/89rWnyqmiEZFHUH2ZHi0D7S
aCkFbjQFpFbVbDpRn2Fe93cxhevHFm1cAHPVakKzTMChL7E+9JrV47zvMmqMx9Q0
esCjKMQn21aKxbj0iwIAADC2vMCiI0vFqV06bJNhj0RLc3x1slCO4MVi6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG7IJY2R24T03KpvVJcjMYox56tcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYnNnbGpaSGJoUFRjcW05VWx5TXhpakhucTF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAaGLEHAswvDMm9La9KB
rdN/1NAINmF5Gex/8V7i6S67MQFDeFfsqUJ16GtWeU6AQBnlpa39A+NoGd0ngjhw
cSlp92LHVvI/h3G2Vj0uwkYxBoOnns0ew5DWzLWMnezWZXZZnXGznUDu956VT88T
AYDVrOUgwHS+7SI9ZYRCrJE3ug0b/Xh6LN4mq/2sp1q26CQZPURZChXNYl+udY9j
wG/vPFdQuF5LW6uOE7/H+6CF0Kw6OK50DmZczVYnRfxg1gaLTsg2oyeoZEKmJifj
5QLKLjzK11Q1bNbbFNXKPmeXCmPkRvlHKhWm21ELsifw4qx6H+YmPFu3vCHo/2QW
ArA=
-----END CERTIFICATE-----
Generated at Thu May 1 19:53:25 2025 by rpki-client